toufy/adonis
toufy/adonis
1
Fork 0
Code Activity Actions

more flexible CSP for forgejo
All checks were successful
/ deploy (push) Successful in 30s
Details

Browse source
This commit is contained in:
toufic ar 2026-01-15 02:26:50 +02:00
parent b8664c812e
commit e230ba3da0
Signed by: toufic ar
SSH key fingerprint: SHA256:/NaO5I1nG3gYKzrzSiTYIdRyaIYxDWfr1U+d+yfJ/4k
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
config/http/default.nix
View file

@ -16,7 +16,7 @@ in {
recommendedBrotliSettings = true;
appendHttpConfig = ''
add_header Content-Security-Policy "script-src 'self'; object-src 'none'; base-uri 'none';" always;
add_header Content-Security-Policy "default-src 'self'; object-src 'none'; base-uri 'none';" always;
add_header 'Referrer-Policy' 'origin-when-cross-origin';
add_header X-Frame-Options DENY;
add_header X-Content-Type-Options nosniff;